Privacy Policy

Beta version. Last updated 2026-10-12.

This policy explains what happens to information when you use Loomton: the website at loomton.com and the app at loomton.com/app. It is written in plain words on purpose. Loomton is in beta, and this page is updated whenever the product changes.

1. Who is responsible

Loomton is run by the team behind Loomton, based in India. In this policy "we" means Loomton, and "you" means the person or shop using it.

2. The short version

We collect only what is needed to run your account and keep your shop's records.
Your shop's records belong to you. Only your account can read them.
We do not sell your data, show advertising, or use tracking cookies.
You can export your data at any time and ask us to delete it.

3. What we collect

Your account.

Your email address, so you can log in and reset your password.
Your password, stored only in a scrambled (hashed) form that we cannot read.
If you sign in with Google: your name, email address and profile picture, as Google shares them. We never see your Google password.
When your account was created and when you last signed in.

Your shop's records, which you type in or create while using the app:

Your shop's details: name, address, phone, tax number and settings.
Your customers: names, phone numbers, addresses, tax numbers and body measurements.
Orders, garments, trial and delivery dates, fabric and clothing stock, suppliers, purchases, sales, invoices, payments and returns.
Words you teach the app for voice measurements.

Messages you send us from the feedback window in the app: what you wrote, the email address you chose to give for a reply, the screen you were on, your app version and your browser type. They are kept in our database and read only by us.

Messages from the contact form on this website: your name, your email address and what you wrote. We use them only to reply to you.

Technical information.

Standard server logs kept by our hosting providers: IP address, browser type, the pages requested and the time. These are used to keep the service running and secure.
A device identifier made by the app, so changes from different devices can be told apart.

What we do not collect. We do not collect payment card details (the beta is free), your location, your contacts, or any information for advertising. Photos you attach in the app stay on your device and are not uploaded.

4. Your customers' information

Your records include personal information about your own customers. You decide what to record and why, so you are responsible for it: for example, for telling your customers that you keep their details and measurements, where your local law requires that. We store and process that information only to provide the service to you, and we do not contact your customers or use their details for anything else.

5. How we use information

To create your account, log you in and keep it secure.
To save your records, keep them in step between your device and your online account, and show them back to you.
To apply the limits of your plan, such as the number of orders and sales in a month.
To send account emails you ask for, such as a password reset.
To find and fix faults, and to prevent abuse of the service.

We do not use your records to train artificial intelligence, and we do not build advertising profiles.

6. Where your data is kept

Online: in a database run for us by Supabase. Each record is tied to your shop, and the database itself refuses to show it to any other account.
On your device: the app keeps a working copy in your browser's storage so it stays fast. Logging out removes that copy once everything has been saved online.
Photos: on your device only, for now.

The servers may be in a different country from yours, so by using Loomton your data may be stored and processed outside your country.

7. Cookies and browser storage

This website does not use advertising or tracking cookies, and has no analytics scripts.
The app keeps you signed in, and keeps your working copy and your settings, in your browser's storage. This is necessary for the app to work.
Our hosting provider may set a short-lived security cookie to protect the site from attacks.

8. Speaking measurements (voice)

Voice is optional and only listens while you have pressed the button to start. There are two ways it can work, and you can choose one in the app's voice window:

Online voice. Your browser's own speech service turns what you say into text: Google's in Chrome, Edge and Android, Apple's in Safari. Your voice is sent to that company for this, under their privacy policy. We never receive or keep the recording; only the text comes back to the app.
On this device. A speech pack is downloaded once (from Hugging Face, which sees a normal download request) and your voice is turned into text on your device. The audio never leaves it.

The voice demo on this website always uses online voice. What it hears is only shown on the page and is not saved or sent to us.

"Automatic" uses online voice when you are connected, and the speech pack when you are offline, on a slow connection with the pack already downloaded, or when online voice is not available. The text heard is shown to you, and only the measurements you choose to use are saved.

9. Who helps us run the service

We share data only with the companies needed to run Loomton, and only as far as they need it:

Supabase: stores accounts and records, handles logins, and sends account emails.
Cloudflare: delivers the website and the app, and keeps standard server logs.
Google: if you choose to sign in with Google, and for online voice in Chrome, Edge and Android.
Apple: for online voice in Safari.
Hugging Face: hosts the speech packs for on-device voice.
Web3Forms: delivers messages from the contact form on this website to our email.
Resend: sends account emails, such as a password reset, from our own address.

We may also disclose information if the law requires it, or to protect the rights and safety of our users or the service. We do not sell or rent your data to anyone.

10. How long we keep it

Your account and records are kept for as long as your account exists.
Records you delete in the app are marked as deleted so they can stay in step across devices; they are removed for good when your account is deleted.
When you ask us to delete your account, we delete it and its records within 30 days, except where the law requires us to keep something longer.
Server logs are kept by our providers for a limited time and then removed.

11. Keeping it safe

All traffic between your device and our service is encrypted (https).
Passwords are stored only in hashed form.
Access rules in the database limit each record to the shop it belongs to.

No online service can promise perfect security. Use a strong password that you do not use elsewhere, keep your device locked, and download a backup regularly. If we learn of a breach that affects your data, we will tell you without undue delay.

12. Your rights

Whatever country you are in, you can:

See and download your data: export spreadsheets or a full backup from the app at any time.
Correct it: edit your records and shop details in the app.
Delete it: ask us to delete your account and everything in it.
Ask questions about how your data is handled, or complain if you think it has been mishandled.

Depending on where you live, the law may give you further rights, for example under India's Digital Personal Data Protection Act, or under the GDPR in the European Union and the United Kingdom: to object to or restrict some uses of your data, to take your data to another service, to withdraw a consent you gave, and to complain to your data protection authority. Where the GDPR applies, we process your data because it is needed to provide the service you signed up for, and because we have a legitimate interest in keeping the service secure and working.

13. Children

Loomton is a tool for businesses. It is not meant for anyone under 18, and we do not knowingly collect information from children.

14. Changes to this policy

We will update this page when the product or the law changes, and change the date at the top. If a change is significant, we will tell you in the app or by email before it takes effect.

15. Contact

For any privacy question or request, including deleting your account, write to hello@loomton.com. We aim to reply within 7 days.